To learn about this product, read the below tutorial or watch this brief Phishing Security Test video.

Follow these steps to complete your free Phishing Security Test. You will not be required to download or install any software. The default test is limited to 100 employees. Please contact us if you need to send more.

Signing Up for a Free Account

If you already have a free account, skip to the Setting Up a Phishing Security Test section.

1. Sign up for a free account here: KnowBe4 Free Phishing Security Test.
2. After entering your information, you can either click Get Started or click the link provided in the email we will send you.
3. On the next page, you'll be prompted to enter your work email address. After you enter your email address, click Next to create a free account.
4. You will receive an email asking you to activate your account. Click the link in the email to activate your free account.
5. After you click the link, you will need to set up your free account. Enter your first and last name as well as a password for the account. Click Save & Continue.
6. As the first person to log in under your domain, you will be automatically set up as the Account Owner. Proceed to Step 3 under Setting Up a Phishing Security Test.

The Account Owner must use his or her corporate email address to sign up and this test will be limited to the domain of that corporate email address. For example, if you sign up with user@CompanyXYZ.com as your email address, you will only be able to test users with an “@CompanyXYZ.com” email address.

Setting Up a Phishing Security Test

1. Log in to your free KnowBe4 account.
2. Under Free Phishing Security Test, click the Get Started button to begin.
3. Select your industry and company size. Entering this data will allow you to compare your phishing test results to others in your industry.
4. Choose what style of phishing template to use. We have five options: A basic Password Change request, an IT department request to sign a new email security policy using Adobe Acrobat Sign, and then three variations of the Password Change request template which match Microsoft 365 (formerly Office 365), Google Workspace (formerly GSuite), and Microsoft Exchange mail environments. You can also choose the language that you want to send the template in by clicking the language drop-down option. By default, the displayed templates will show in English. However, once a language has been selected, the templates will preview and send in the selected language. We recommend choosing a template that matches your email environment for the best results. If you're unsure of which template to choose, select the basic template.
   
   
   Note:You can preview each template and send a test template email to yourself by clicking the Preview & Send Test Emailbutton. You can toggle the red flags on and off, preview the landing page, and send yourself a test email by clicking the Send Me a Test Email button in the top-right corner of the pop-up window.
   
5. Choose who you'd like to send this phishing test to. This page allows you to import up to 100 email addresses from your organization. To add these, simply type out or paste the email addresses into the box, one per line, with no commas or spaces. Click Next to move to the next step.
6. Choose which landing page you would like your users to see upon failing the test. You can select either a 404 error page, so the user may assume they clicked on a broken link, or our Social Engineering Indicators (SEI) landing page, which lets the user know they failed a phishing test and then instructs them on the red flags that they should have looked out for on this particular phishing email. If you skip this step, we will select the SEI landing page by default.
7. If you haven't already done so, make sure you whitelist our mail servers and test that you can successfully receive our phishing emails. On our Review & Launch page, we provide links to our whitelisting documentation to guide you through this.
8. After whitelisting, click the gray Preview & Send Test Email button. This is a sample of what your email will look like when your users receive it. You can toggle the red flags on and off, preview the landing page, and send yourself a test email by clicking the Send Me a Test Email button in the top right-right corner of the pop-up window.
9. After sending the test email, check your mail and make sure you've received it. This may take up to ten minutes to receive. You can make sure it has been delivered by checking the Test Email Delivery area towards the bottom of the page. If you receive this email, you are ready to continue to the last step. If you do not receive the email or it is filtered by your email system, please review our whitelisting instructions linked on the page, or you can view our Whitelisting Guide. Be sure to consider any spam filter service or device you have in place where we may need to be whitelisted as well. You can also contact our support team for assistance.
10. Once you've successfully whitelisted and are ready to start your test, click the Start your free PST now! button to begin. The test will send out a phishing email to all of the users you have entered and it will track any clicks on these emails for three days.

Analyzing Your Results

After you run the test, you can return to your account at any time to view the results on the Dashboard page. You will be able to see your Phish-Prone Percentage, showing your vulnerability if a similar phishing attack were to occur within your organization. You will also see how your Phish-Prone Percentage compares with others in your industry, after one year of combined computer-based security awareness training and simulated phishing.

A PDF report will also be emailed to you automatically after 24 hours. If you would like to know who clicked, your rep or reseller can get you that information! If you do not know who your rep is, simply submit a support ticket and we'll assist you right away.

Armed with this knowledge, you can help protect your organization by teaching your users about the dangers of these types of attacks. Enrolling in KnowBe4's new school security awareness training can help you achieve this goal. Through KnowBe4, you can train your users to spot the warning signs and keep their skills sharp by sending fake phishing attacks much like the ones in this free tool. For more information, request a demo here.